EUVD-2025-178817

Malicious code in fusion-inflation-dactyl-webpack npm...

EUVD-2025-179657

Malicious code in comet-rehype-transport-entanglement npm...

EUVD-2025-180337

Malicious code in arcturus-venus-loop-cressida npm...

EUVD-2025-179006

Malicious code in event-husky-tachyon-auth0 npm...

EUVD-2025-177224

Malicious code in phenomic-prettier-stylelint-development-library npm...

EUVD-2025-176164

Malicious code in subduction-phylogenetics-tachyon-tethys npm...

EUVD-2025-178778

Malicious code in ganymede-metabolomics-cryptography-metalsmith npm...

EUVD-2025-178615

Malicious code in halley-fusion-parcel-node-sass npm...

EUVD-2025-178237

Malicious code in jwt-firebase-izar-gulp npm...

EUVD-2025-178309

Malicious code in janus-greatfilter-cosmiconfig-ursa npm...

Malicious code in technocracy-neptunology-entanglement-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a714060d334a3130ad7599f72fbbeacd26069ba90c6a06c2bd81ea9eedcf8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-event-gammarayburst-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8618a6ac2d8d8be1023291acfd62ee0c8a82f6f62a31e2f78f2df4bce163aae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178923

Malicious code in fetch-readable-spectron-convict npm...

EUVD-2025-176716

Malicious code in relay-xanadu-playwright-miranda npm...

EUVD-2025-178906

Malicious code in file-sed-hash-xi-sed npm...

EUVD-2025-176174

Malicious code in string-version-oauth-epimetheus npm...

EUVD-2025-179227

Malicious code in dynamo-run-script-jasmine-kuiperbelt npm...

EUVD-2025-179552

Malicious code in cosmiconfig-gatsby-janus-slides npm...

EUVD-2025-180270

Malicious code in async-eta-try-balance-java npm...

Malicious code in tailwindcss-bunyan-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7ca0b166720ff7a48b675cb46297e227e219b0c43a8ef775f03020ecc2363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...